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@ Transaction approval system. 



(57) A transaction approval system (10) has a trans- 
action limit (30) stored in a terminal (16) where it can 
be dynamically adjusted to vary the level of risk at 
the terminal (16) to be closer to the desired level of 
risk. The terminal (16) stores (28) all transactions 
occurring over a defined time interval and transmits 
this data to a central processor (1 2) for analysis and 
calculation of the transaction limit (30) which is 



downloaded to the terminal (16) by the central pro- 
cessor (12). The terminal (16) generates and stores 
lists of account numbers (44,46) which might be 
invalid and should provoke an on-line request for 
authorization. One list (44) is of transactions that 
exceeded the transactions limit (30) and were re- 
fused by the central processor (12). Another list (46) 
is of off-line approved transactions. 
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Technical Field 

The subject invention relates to a system for 
authorizing financial transactions based on the use 
of transaction cards. Various enhancements to the 5 
operation of a transaction terminal are disclosed 
which can improve the operation of existing sys- 
tems. 

Background of the Invention io 

A large percentage of transactions are now 
completed using a transaction card, rather than 
cash or checks. A small, but significant percentage 
of ait such transactions generate losses due to 75 
improper usage of the cards. Such improper usage 
can include exceeding the credit limit of the card. 
The definition of improper use also includes contin- 
ued purchases while failing to pay monthly mini- 
mum charges. Various fraud scenarios also contri- 20 
bute to this loss. For example, purchases are made 
with cards that have been lost or stolen. In addition, 
dishonest employees at a merchant can improperly 
create a transaction through the unauthorized use 
of an account number. 25 

Many approaches have been implemented to 
reduce these losses. One of the earliest ap- 
proaches used to combat these losses was to 
distribute a printed list of invalid cards. In use, the 
merchant would check the account number on the 30 
card presented for the transaction with the account 
numbers printed in the list. If the account number 
is listed, the transaction would be declined. 

The use of such a printed list is effective in 
reducing a large percentage of fraud losses. Un- 35 
fortunately, this approach has a few drawbacks. For 
example, a transaction card is often used almost 
immediately after it has been lost or stolen. This 
immediate use will occur before the card has been 
listed or before the list has been distributed. 40 

Because of these difficulties, other, more so- 
phisticated techniques have been implemented. 
One of the most effective schemes is to authorize 
every transaction through a real-time, on-line com- 
munication network. For example, an automated 45 
transaction terminal at the merchant can transmit 
the account number of the card presented for a 
transaction to a central processor. The account 
number of the card can then be checked against a 
current list of invalid card numbers stored either at 50 
the central processor or back at the card issuer. 

This on-line scheme eliminates the lag time 
inherent in distributing printed lists of invalid cards. 
Furthermore, the cost of authorizing transactions is 
justified for high value transactions. However, for 55 
low value transactions, the losses tend to be lower 
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and the benefits gained from on-line authorization 
do not justify the added costs and delay Involved in 
obtained an on-line approval. 

Accordingly, various approaches have been de- 
veloped to authorize lower value transactions at the 
terminal, in an off-line manner. The simplest ap- 
proach has been to provide the terminal with a 
transaction or "floor" limit. Any transaction having a 
value which is below that floor limit can be ap- 
proved by the terminal. If the value of the transac- 
tion exceeds that floor limit, a request for authoriza- 
tion must be generated and transmitted to the 
central processor. 

The floor limit selected for a particular terminal 
has traditionally been based on the type of mer- 
chant establishment and its location. The floor limit 
selected represents an attempt to balance the level 
of loss which will occur for transactions that are 
authorized by the terminal with the cost of transmit- 
ting the requests to the central processor. 

In most systems, the issuer of the card has no 
control over the floor limit. More recently, a system 
has been developed wherein both the issuer and 
the financial institution that supplies the terminal to 
the merchant have a say as to the floor limit in the 
terminal. Such a system is described in U.S. Patent 
No, 4,943,707, issued March 14, 1989, to Boston 
and incorporated herein by reference. In this sys- 
tem, the terminal determines the transaction limit 
using data both stored in the terminal and data 
encoded on the transaction card. In the latter sys- 
tem, the data in the terminal used to calculate the 
transaction limit is also determined by the type and 
location of the merchant. This information is fixed 
in the terminal. While this approach successfully 
reduces some fraud losses, it cannot accommodate 
short term changes in the patterns of loss which 
occur at a specific terminal. For example, if a new 
employee is dishonest or follows sloppy proce- 
dures, the losses will immediately increase. Ac- 
cordingly, it would be desirable to actively update 
the transaction limit in the terminal to maintain the 
desired balance between the level of risk and com- 
munication costs. 

Another approach for reducing losses when a 
terminal authorizes transactions in an off-line mode 
is to provide the terminal with a list of invalid 
account numbers. Such a system was disclosed in 
U.S. Patent No.3,696,335, issued October 3, 1972 
to Lemelson. The latter approach required that the 
entire list of invalid cards be transmitted to the 
terminals. This approach has been found to be 
impractical because the list is quite long and there- 
fore requires large data storage capacity in the 
terminals. The list would also take a long time to 
transmit to the terminals. 
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Various suggestions have been made to over- 
come these problems. For example, U.S. Patent 
No. 4.558,211, issued December 10, 1985 to Ber- 
stein teaches that the list can be reduced by geo- 
graphical criteria. 

Still another approach which has been sug- 
gested is disclosed in U.S. Patent No. 4,943,707, 
issued July 24, 1990 to Boggan, and incorporated 
herein by reference. In this patent, a system is 
disclosed for generating a data compressed ver- 
sion of the invalid card list. This data compressed 
version is much shorter and therefore requires less 
storage space in the terminal and can be transmit- 
ted faster. However, in certain cases, the cost of 
this approach still exceeds the benefits gained in 
reduction of loss. Accordingly, it would be desir- 
able to provide other techniques for storing lists of 
potentially invalid cards which is not subject to any 
of the drawbacks discussed above. 

Therefore, it is an object of the subject inven- 
tion to provide an improved transaction approval 
system. 

It is another object of the subject invention to 
provide a transaction terminal with enhancements 
for improving the effectiveness of the authorization 
process. 

It is a further object of the subject invention to 
provide a transaction approval system wherein the 
transaction limit in the terminal can be varied. 

It is still another object of the subject invention 
to provide a transaction approval system wherein 
the transaction limit in the terminal can be adjusted 
to reflect a desired level of risk of loss. 

It is still a further object of the subject invention 
to provide a terminal which keeps a record of 
account numbers of certain transaction cards which 
were used in the terminal. 

It is still another object of the subject invention 
to provide a terminal which keeps a local record of 
the account number of transaction cards in any 
transaction wherein the central processor declined 
to approve the transaction. 

It is still a further object of the subject invention 
to provide a terminal which keeps a local record of 
the account number of transaction cards in any 
transaction where the value was below the transac- 
tion limit and the transaction was approved off-line. 

Summary of the Invention 

In accordance with these and many other ob- 
jects the subject invention includes a number of 
developments to enhance the effectiveness of lo- 
cal, off-line authorizations by transaction terminals. 
These enhancements are particularly effective for 
environments where the terminals are used to au- 
thorize a high volume of low value transactions. 



One of these enhancements includes the ability 
to vary the transaction limit in the terminal in re- 
sponse to changing risk conditions at that terminal. 
As noted above, if a transaction amount is below 

5 the transaction limit it can be approved off-line by 
the terminal. In the subject technique, the records 
of all transactions are transmitted to a central pro- 
cessor. The central processor evaluates all of these 
transactions to determine the level of risk of loss 

10 associated with these transactions. This evaluation 
will include a comparison of account numbers used 
in the transaction with a complete list of invalid 
account numbers. 

If the calculated level of risk is different from 

75 the desired level of risk, the transaction limit will be 
reset to a new value selected to adjust the level of 
risk to be closer to the desired level of risk. In the 
preferred embodiment, both long term and short 
term transaction histories are monitored. 

20 In another aspect of the subject invention, a 

certain amount of memory in the terminal can be 
devoted to storing account numbers which will pro- 
voke a request for on-line authorization information. 
The account numbers are stored in three different 

25 lists. The first list is generated by the central pro- 
cessor and transmitted to the terminal. This list 
includes specific invalid account numbers. This list 
can be a data compressed version of an invalid 
card list described above with respect to U.S. Pat- 

30 ent No.4,943,707. In the preferred embodiment, the 
list is very short and includes only those invalid 
cards which had been reported actually used in the 
narrow geographical region where the terminal is 
located. 

35 The second and third lists are generated lo- 

cally at the terminal and are based on activity at 
that terminal. The second list includes a record of 
account numbers from transactions that were for- 
warded to the central processor for authorization 

40 information and the central processor declined the 
transaction. Since this card is identified as at least 
suspicious, any subsequent uses should provoke 
an on-line request even if the transaction amount is 
below the transaction limit of the terminal. By plac- 

45 ing the card on the second list, such an on-line 
request will be generated. 

The third list contains account numbers of 
cards for transactions where the transaction amount 
was below the transaction limit and was approved, 

50 Off-line by the terminal. Once the account number 
is placed on this list, any subsequent uses of the 
card at that terminal will provoke an on-line re- 
quest. This technique is intended to frustrate the 
fraud scenario wherein the card is repeatedly used 

55 for many low value transactions in an effort to avoid 
detection. 



3 



BNSOOCID: <EP 0485090A2 J.> 



5 EP 0 485 090 A2 6 



It should be noted that the concept of adding 
account numbers to a terminal to provoke an on- 
line request for authorization during a subsequent 
use is disclosed in the above cited U.S. Patent 
No. 4,943, 707. However, in the system described in 
the latter patent, the account number was always 
added to the list if it had not been present in the 
list previously, regardless of wherein the transac- 
tion was approved off-line. Thus, even if the trans- 
action was forwarded for on-line authorization be- 
cause, for example, the transaction amount ex- 
ceeded the transaction limit, the account number 
was still added to the list. It is believed that the 
latter approach is not as efficient as that described 
herein where the account number is added to the 
list only if the transaction is approved off-line by 
the terminal. 

Further objects and advantages of the subject 
invention will become apparent from the following 
detailed description taken in conjunction with the 
following drawings in which: 

Brief Description of the Drawings: 

Figure 1 is a block diagram of a transaction 
approval network of the subject invention. 
Figure 2 is a flow chart illustrating the steps 
performed during a transaction in a terminal 
operating in accordance with the subject inven- 
tion. 

Detailed Description of the Preferred Embodiment 

Referring to Figure 1. there is illustrated an 
overall block diagram of a transaction approval 
network 10. The network 10 includes a central 
processor 12 which functions as communication 
node between financial institutions that issue trans- 
action cards (issuers 14) and terminals 16. As 
shown in Figure 1, the terminals 16 can be directly 
connected to the central processor 12. In large 
transaction systems, there exists intermediate fi- 
nancial institutions and processors which act as 
intermediate communication nodes. For the pur- 
poses of describing the subject invention, the inter- 
mediate communication nodes can be considered 
transparent to the system. 

In existing systems, the central processor can 
route requests for authorization information gen- 
erated at a terminal 16 to the issuer 14 of the 
transaction card. The issuer will determine if a 
particular transaction can be approved. An appro- 
priate response is generated by the issuer and 
transmitted back to the terminal. 

If the issuer is unavailable, the central proces- 
sor will act on the authorization request. To facili- 
tate the evaluation of the transaction, the central 
processor maintains a list 20 of invalid cards, gen- 



erated from information supplied by the issuers. 
The central processor consults that list in determin- 
ing whether a particular transaction can be ap- 
proved. 

5 As noted above, many existing transaction ter- 

minals are equipped to authorize a certain percent- 
age of transactions in an off-line manner, without 
contacting the central processor. These existing 
terminals includes internal processors and elec- 

10 tronic memories. The design of such terminals is 
well known to those skilled in the art and need not 
be discussed. The subject Invention can be imple- 
mented in latter type of terminals with the modifica- 
tions discussed below. 

75 In order to authorize the transaction locally, an 

existing terminal will carry out a number of tests. 
For example, the terminal will determine if the card 
has expired by comparing the expiration date to 
the current date. The terminal can also determine if 

20 the account number is in an allowable format so 
that forged cards can be identified. 

The terminal will also determine if the transac- 
tion amount is below an internally set transaction 
limit. If the transaction amount exceeds the trans- 

25 action limit, a request for authorization information 
will be generated and transmitted to the central 
processor. The central processor will supply a re- 
sponse to the terminal, based on information from 
its own data base or based on a communication 

30 with the issuer. If the transaction amount is below 
the transaction limit, then the terminal can au- 
thorize the transaction. 

As noted above, the transaction limit is typi- 
cally fixed in the terminal. It is selected to control 

35 the risk of loss at a desired level. Terminals which 
are in locations which are subject to high loss will 
have a low transaction limit. If losses are very high, 
the transaction limit could even be set to zero to 
insure that all transactions are sent on-line for 

40 authorization. In contrast, terminals which are lo- 
cated at merchants where losses are low can have 
a high transaction limit, such as $50 or more. 

As noted above, the loss associated with low 
value transactions is not high. It has been deter- 

45 mined that the average additional loss which can 
be expected when a twenty dollar purchase is not 
authorized in an on-line manner amounts to about 
four cents. In contrast, it costs about ten cents to 
obtain an on-line authorization. Thus, as long as the 

50 rate of risk of additional loss is maintained at a low 
level, it will be more cost effective to authorize low 
value transactions off-line. This goal can be 
achieved by dynamically adjusting the transaction 
limit in the terminal. The subject approach has the 

56 added benefit that off-line approvals are much 
faster and therefore highly desirable in high vol- 
ume, low value environments. 
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As noted above, in the prior art systems, the 
transaction limit was selected and stored in the 
terminal based on past performance by the mer- 
chant and the location of merchant. It is believed 
that at least one system exists where the transac- 
tion limit can be downloaded to the terminal from a 
central source. However, even in the latter system, 
the criteria for selecting the transaction limit is only 
based on regional statistics. No effort is made to 
analyze the performance of specific terminals. Ac- 
cordingly, no prior art system could respond to a 
change in the level of risk at a particular terminal. 
Such a change could result from the hiring of a 
dishonest employee. 

In accordance with one aspect of the subject 
invention, the transaction limit in the terminal can 
be dynamically varied to maintain the desired bal- 
ance between the level of risk and communication 
costs. In order to carry out this goal, the central 
processor must assess the transaction history at 
the terminal on a regular basis and compute the 
actual level of risk associated with those transac- 
tions. 

There presently exists transaction terminals 
which keep a record of all transactions. These 
terminals are referred to as data capture terminals. 
The transaction records are collected in a memory 
28 and typically downloaded to the central proces- 
sor, once a day, in a batch process. This informa- 
tion is used by the central processor to generate 
billing information which is then supplied to the 
respective issuers. The card issuers will then gen- 
erate the bills that will be sent to the cardholder. 

As can be seen, a mechanism already exists 
for communicating the transaction records to the 
central processor. In order to implement the sub- 
ject invention, the central processor will now deter- 
mine the number of transactions which have oc- 
curred at that terminal that are based on accounts 
in the master invalid card list 20. While debts 
created during many of these transactions will be 
ultimately collected, the likelihood that the debt will 
be uncollectible is quite high. If the level of risk 
posed by these recorded transactions differs from 
the desired level, the central processor can cal- 
culate a new transaction limit intended to adjust the 
level of risk to be closer to the desired level. This 
new transaction limit is then downloaded to the 
terminal and is stored in memory 30. The down- 
loading process can be earned out during the exist- 
ing data capture communication sessions. 

In the preferred embodiment, the central pro- 
cessor will store in memory 32, a record of the 
existing transaction limit for each terminal. The 
memory will also keep a record of both the long 
and short term history of the risk level at the 
terminal. For example, the processor will keep a 
count of the number of transactions at the terminal 
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and the number of improper card usages. The 
short term count will keep a rolling total for several 
days, while the long term count will cover several 
weeks. Both of these records are updated each 

5 time data is received from the terminal. 

The analysis will be performed on all transac- 
tions, even those that were authorized on-line. In 
this manner, the system can detect an improper 
transaction that might have been approved on-line. 

10 The latter situation can occur if the transaction took 
place before a card was reported lost or stolen but 
was subsequently reported prior to the analysis by 
the central processor. 

The calculation process by the central proces- 

75 sor will be based on a table of decision rules. If 
both the long and short term risk level are below a 
threshold, the transaction limit could be increased. 
If either or both the long and short term risk level 
are above a threshold, the transaction limit can be 

20 adjusted downwardly. If it is determined that a new 
limit is necessary, that information can be down- 
loaded to the terminal and recorded at the central 
processor during the next data capture session. 
In order to minimizes losses for transactions 

25 that have a value below the transaction limit, it is 
desirable to add procedures that will provoke a 
request for on-line authorization in situations where 
there is a heightened possibility that the transaction 
is fraudulent. One method that has been suggested 

30 is to generate an on-line request for authorization 
when the value of the transaction falls in a small 
range just under the transaction limit. This ap- 
proach can be used to prevent someone who has 
knowledge of the transaction limit from avoiding 

35 detection by restricting the value of purchases to 
amounts slightly less than the transaction limit. 

Another approach is to provide the terminal 
with a list of invalid cards. Various methods have 
been developed to carry out this approach as dis- 

40 closed in the above cited patents. Most of these 
approaches require a large amount of memory in 
the terminal. In addition, transmission of such lists 
takes a significant amount time. In the subject 
system, an attempt is made to derive similar bene- 

45 fits while reducing the memory storage and com- 
munication requirements. 

In the preferred embodiment of the subject 
system, the terminal is further provided with a 
memory area 40 for storing lists of suspect cards. 

50 The account number of each card presented for 
the transaction is compared to the account num- 
bers in these lists. If the account number is 
present, the terminal will generate a request for 
authorization information from the central proces- 

55 sor. 

Memory area 40 is subdivided into three lists. 
The first list 42 is generated by the central proces- 
sor 12 and supplied to the terminal 16. This list 

5 
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contains invalid account numbers and could be in 
the form described In U.S. Patent No. 4,943,707. 
However, the data compressed master table de- 
scribed in the latter patent might hold information 
about 100,000 invalid accounts and require 125 
kilobytes of memory. In the subject system, it is 
desirable that the entire memory 40 be only about 
5 kilobytes in length. Various data compression 
algorithms can be used to maximize the storage 
capability of this memory space. 

In the preferred embodiment of the subject 
invention, the list generated by the central proces- 
sor should be limited to a small subset of invalid 
cards that have been reported actually used in the 
narrow geographical area where the terminal is 
located. In addition, this list can be limited to cards 
that have been used in this type of terminal , 
which, as noted above, will most likely be placed in 
high volume, low value environments. As noted 
above, the subject invention includes a mechanism 
for daily reporting all of transaction activity from 
data capture terminals to the central processor. 
Thus, the central processor can compare the trans- 
action records with its list of invalid cards and 
accurately compile a list of fraudulent cards that 
were used in a given region. 

Since the regional list compiled by the central 
processor is limited to cards actually used it will be 
relatively small and can be transmitted quickly. 
Transmission time is further reduced by only trans- 
mitting new account numbers that appear on the 
list. These entries can be added to the list 42 in the 
terminal. When the region in memory storing the 
list is full, the oldest entry in terms of time can be 
deleted to make room for the most recent entry. 
Preferably, the parameters of the system are ar- 
ranged such that any entry will remain resident in 
the terminal an average of about three weeks. 

The remaining two regions in memory 40 in- 
clude lists which are generated by and remain in 
the terminal. List 44 contains a list of accounts 
numbers which are associated with a transaction 
that provoked an on-line request tor authorization 
information and the response from the central pro- 
cessor was to decline the transaction. In this case, 
the account number is clearly suspect and any 
future use of the card should be scrutinized. By 
placing the account number on this list, an on-line 
request will be generated for each subsequent use 
of the account number even if the transaction 
amount is below the transaction limit. As with the 
first list 42. when the memory space is full, the 
oldest entry can be deleted to make room for the 
most current entry. 

The third list 46 contains account numbers of 
all cards which have been involved in transactions 
that have been approved off-line. By this approach, 
the second use of the card at that terminal will 



SNSDOCID: <EP 04aS090A2 I > 



provoke an on-line request for authorization in- 
formation. The system will therefore allow a single 
fraudulent use below the transaction limit but will 
slop a second use. It has been found that a com- 

5 mon fraudulent activity pattern includes multiple 
low value transactions at a single terminal. Record- 
ing account numbers associated with transactions 
that have been approved off-line will prevent such 
a fraud scenario. Once again, when the list is full. 

70 the oldest entry can be deleted to make room for 
the most current entry. 

While multiple uses of a card at a single termi- 
* nal for low value transactions is often associated 
with fraudulent activity, it is also quite common and 

15 legitimate in certain merchant situation. For exam- 
ple, a number of "fast food" restaurants are begin- 
ning to accept transaction cards for payment. It is 
not unusual for a customer to purchase food more 
than once a week from such a local establishment. 

20 In order to reduce the number of times such 

additional low value transactions provoke an unnec- 
essary on-line request for authorization, each ac- 
count number in file 46 can further be provided 
with a data field indicating either the number of 

25 times it has been used or the date it was last used. 
If the data field is a usage counter, the requests for 
on-line authorization can be made only during the 
second usage or for every other usage. If the data 
field indicates the date it was last used, an on-line 

30 request can be generated only if the last use was 
relatively recently. 

It should be understood that each terminal 16 
can be provided with its own individual storage 
area 40. Alternatively, a single storage area 40 may 

35 be shared by a group of terminals at a given 
merchant location. 

Figure 2 is a flow chart illustrating the steps 
taken at a terminal 16 to authorize a transaction. At 
the start of the transaction, the card is swiped 

40 through the terminal so that identifying information 
encoded on the magnetic stripe of the card can be 
read by the terminal. The merchant will also enter 
the amount of the transaction. 

In step 50, the terminal will carry out a number 

45 of initial tests to determine if the transaction can be 
approved. As noted above, these tests will include 
a determination as to whether the card has expired. 
Assuming the initial hurdles are cleared, the termi- 
nal will compare the transaction amount to the 

50 transaction limit stored in memory 30 (step 52). In 
the preferred embodiment, the transaction limit is 
dynamically adjusted on a regular basis by the 
central processor to maintain the level of risk close 
to the desired level. 

55 If the transaction amount exceeds the transac- 

tion limit, the terminal will generate and transmit a 
request for authorization information from the cen- 
tral processor in step 54. As noted above, either 

6 
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the central processor 12 or the Issuer 14 of the 
card will generate a response. In either case, a 
response will received by the terminal in step 56. 

The terminal will then determine if the transac- 
tion has been approved or declined in step 58. If it 
has been approved, the transaction can be com- 
pleted in step 60, Typically a message which au- 
thorizes a transaction will include an authorization 
code which is recorded on the transaction receipt. 

If the transaction has been declined, the trans- 
action will not be completed. In addition, the ac- 
count number will be recorded In list 44 (step 62), 
By this arrangement, the next usage of that ac- 
count number will provoke an on-line request for 
authorization even if the transaction amount is be- 
low the transaction limit. 

Returning to step 52. if the transaction amount 
does not exceed the transaction limit, then the 
terminal must determine if the account number is 
present on any of the lists stored in memory 40 
(step 64). If the account number is present, the 
terminal will generate a request for on-line au- 
thorization in step 54. The terminal will then follow 
the sequence described above. 

If the account number did not appear on any of 
the lists in memory 40. then the transaction can be 
completed and approved off-line In step 66. In this 
case, the terminal will generate an authorization 
code which is recorded on the transaction receipt. 
In accordance with the subject invention, since the 
transaction has been approved off-line, the account 
number will also be added to list 46 so that a 
subsequent use of the card will provoke an on-line 
request for authorization information (step 68). As 
noted above, the terminal will keep a record of all 
transactions, whether they were authorized or de- 
clined. 

In summary there has been disclosed a trans- 
action approval system which includes various en- 
hancements to existing systems. In one aspect of 
the subject invention, the transaction limit stored in 
the terminal can be dynamically adjusted to vary 
the level of risk at the terminal to be closer to the 
desired level of risk. In another aspect of the sub- 
ject invention, the terminal will generate and store a 
list of account numbers which might be invalid and 
should provoke an on-line request for authorization. 

While the subject invention has been described 
with reference to a preferred embodiment, various 
changes and modifications could be made therein, 
by one skilled In the art. without varying from the 
scope and spirit of the subject Invention as defined 
by the appended claims. 



Claims 

1. A system for authorizing transactions compris- 
ing: 

5 terminal means including a storage means, 

said terminal means functioning to authorize 
certain of said transactions based on criteria 
maintained in said storage means, said storage 
means further maintaining a record of the 

70 transactions handled by said terminal means; 

means associated with said terminal 
means for periodically transmitting and receiv- 
ing information including said transaction 
records; and 

76 central processor means located remote 

from said terminal means for receiving and 
analyzing said transaction records and calcu- 
lating a level of risk associated with said trans- 
action records, and if said level of risk varies 

20 from a desired level of risk, supplying said 

terminal means with different criteria for au- 
thorizing transactions, said different criteria be- 
ing selected to adjust the level of risk to be 
closer to the desired level of risk. 



25 



30 



2. A system as recited in claim 1 wherein said 
criteria for authorizing the transaction includes 
a transaction limit which is compared to the 
transaction amount by said terminal means. 

3. A system as recited in claim 2 wherein the 
different criteria supplied to the terminal means 
is defined by a new transaction limit. 



35 4. A system is recited In claim 3 wherein said 
central processor means calculates the level of 
risk over two time intervals of differing length 
to determine if the transaction limit should be 
changed. 



40 



46 



5. A system as recited in claim 1 wherein said 
level of risk is calculated by comparing the 
transaction records with Information about ac- 
counts associated with the transactions. 



6. A transaction terminal for use in an network for 
authorizing transactions based on the use of 
transactions cards, each transaction card hav- 
ing an account number, said network including 

50 a central processor, said transaction terminal 

comprising: 

storage means, said storage means includ- 
ing criteria for authorizing transactions and a 
list of account numbers of transaction cards; 

55 and 

processor means functioning to authorize 
certain of said transactions based on said cri- 
teria, said criteria including a comparison of 
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the account number of the card presented for 
the transaction to said list of stored account 
numbers, said processor means further func- 
tioning to request authorization information 
from the central processor for the remaining s 
transactions which have not been authorized 
by the processor means, and if any such re- 
quest for authorization is declined by the cen- 
tral processor, said processor means further 
functions to add the account number of the io 
transaction card presented for that transaction 
to said list in said storage means so that a 
subsequent use of that transaction card at the 
terminal will result in a request for authorization 
information from the central processor even if* 76 
the remainder of said criteria are met. 

7. A transaction terminal as recited in claim 6 
wherein said criteria for authorizing the trans- 
action further includes a transaction limit which 20 
is compared to the transaction amount by said 
processor means. 

8. A transaction terminal as recited in claim 6 
wherein the maximum number of cards which 25 
can exist in the list is fixed and when that limit 

is reached, the earliest temporal entry to that 
list is deleted to provide room for the most 
current temporal entry. 

30 

9. A transaction terminal for use in an network for 
authorizing transactions based on the use of 
transactions cards, each transaction card hav- 
ing an account number, said network including 

a central processor, said transaction terminal 35 
comprising: 

storage means for maintaining a transac- 
tion limit and a list of account numbers of 
transaction cards; and 

processor means functioning to authorize 40 
certain of said transactions by comparing the 
account number of the card presented for the 
transaction to said list of stored account num- 
bers as well as comparing the amount of the 
transaction to the transaction limit, said proces- 45 
sor means further functioning to request au- 
thorization information from the central proces- 
sor for the remaining transactions which have 
not been authorized by the processor means, 
said processor means further functioning to so 
add the account number of the transaction 
card presented for that transaction to said list 
in said storage means only if said processor 
means authorized said transaction, so that a 
subsequent use of that transaction card at that 55 
terminal will result in a request for authorization 
information from said central processor even if 
the remainder of said criteria are met. 



10. A transaction terminal as recited in claim 9 
wherein the maximum number of cards which 
can exist in the list is fixed and when that limit 
is reached, the earliest temporal entry to that 
list is deleted to provide room for the most 
current temporal entry. 

11. A method for adjusting the transaction limit in 
a terminal, comprising the steps of: 

analyzing the records of transactions which 
have occurred at the terminal to determine a 
level of risk associated therewith; and 

if said level of risk varies from a desired 
level of risk, 

changing the transaction limit in the termi- 
nal to adjust the level of risk to be closer to the 
desired level of risk. 

12. A method as recited in claim 11 wherein the 
level of risk is calculated over two time inter- 
vals of differing length to determine if the 
transaction limit should be changed. 

13. A method as recited in claim 11 wherein the 
level of risk is calculated by comparing the 
transaction records with information about ac- 
counts associated with the transactions. 

14. A method as recited in claim 11 further includ- 
ing the step of transmitting the transactions 
records to a central processor for analysis, 

15. A method as recited in claim 14 wherein the 
central processor transmits a new transaction 
limit to the terminal. 

16. A method of operating a transaction terminal 
for use in an network for authorizing transac- 
tions based on the use of transactions cards, 
each transaction card having an account num- 
ber, said network including a central processor, 
and wherein a list of account numbers of trans- 
action cards are stored in the terminal along 
with criteria for approving a transaction, said 
criteria including a comparison of the account 
number of the card presented for the transac- 
tion to the list of stored account numbers, said 
method comprising the steps of: 

requesting authorization information from 
the central processor for transactions which do 
not meet the stored criteria, and if any such 
request for authorization is declined by the 
central processor; 

adding the account number of the transac- 
tion card presented for that transaction to the 
list in the terminal so that a subsequent use of 
that transaction card at the terminal will result 
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In a request for authorization information from 
the central processor even If the remainder of 
said criteria are met. 

17. A method as recited in claim 16 wherein the 5 
criteria for authorizing the transaction further 
includes a transaction limit which is compared 
to the transaction amount by the terminal. 

10 
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@ A transaction approval system (10) has a trans- 
action limit (30) stored in a terminal (16) where it can 
be dynamically adjusted to vary the level of risk at 
the terminal (16) to be closer to the desired level of 
risk. The terminal (16) stores (28) all transactions 
occurring over a defined time interval and transmits 
this data to a central processor (12) for analysis and 
calculation of the transaction limit (30) which is 



downloaded to the terminal (16) by the central pro- 
cessor (12). The terminal (16) generates and stores 
lists of account numbers (44.46) which might be 
invalid and should provoke an on-line request for 
authorization. One list (44) is of transactions that 
exceeded the transactions limit (30) and were re- 
fused by the central processor (12). Another list (46) 
is of off-line approved transactions. 
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